Vulnerability details
CVE-2024-11344
Lexmark CX
Type confusion vulnerability in the Postscript interpreter in various Lexmark devices
CVSS 3.1
7.3High
Official description
A type confusion vulnerability has been identified in the Postscript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 7.3High | 3.1 | CVEProject cvelistV5 (CNA) (Lexmark) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ LW80.GM2.P257 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ CXLBL.230.401 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ CXTPP.230.401 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ CSTPP.230.401 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ CSTAT.230.401 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ CXTAT.230.401 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ CSTMH.230.401 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ CXTMH.230.401 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ LW90.TL2.P215 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ LW90.PR2.P215 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ LW90.PR4.P215 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ LW90.SB4.P215 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ LW90.SB7.P215 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ LW90.DN2.P215 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ LW90.DN4.P215 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ LW90.DN7.P215 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ LW90.TU.P215 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ LW90.SA.P215 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ LW90.MG.P215 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ LW90.GM7.P215 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ LW90.GM4.P215 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ LW90.VY4.P215 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ LW80.PRL.P257 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ LW80.SB2.P257 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ LW80.VYL.P257 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ LW80.VY2.P257 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ CXTLS.240.076 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ MXTLS.240.076 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ CSTLS.240.076 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ MSNSN.240.042 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ MSTSN.240.042 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ MXTSN.240.042 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ CSNGV.240.042 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ CSTGV.240.042 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ CXTGV.240.042 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ CXTPC.240.042 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ CSTPC.240.042 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ MXTCT.240.042 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ MXTPM.240.042 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ CXTMM.240.042 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ CSTMM.240.042 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ CSTZJ.240.042 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ CSNZJ.240.042 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ CXTZJ.240.042 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ CXNZJ.240.042 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ MSNGM.240.042 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ MSTGM.240.042 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ MXNGM.240.042 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ MXTGM.240.042 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ MSNGW.240.042 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ MSTGW.240.042 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ MXTGW.240.042 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ MSLSG.230.401 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ MXLSG.230.401 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ MSLBD.230.401 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ MXLBD.230.401 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ CSLBN.230.401 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ CSLBL.230.401 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | v ≤ CXLBN.230.401 | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | CSNGV.240.200 ≤ v | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | CSNZJ.240.200 ≤ v | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | CSTGV.240.200 ≤ v | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | CSTLS.240.200 ≤ v | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | CSTMM.240.200 ≤ v | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | CSTPC.240.200 ≤ v | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | CSTZJ.240.200 ≤ v | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | CXNZJ.240.200 ≤ v | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | CXTGV.240.200 ≤ v | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | CXTLS.240.200 ≤ v | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | CXTMM.240.200 ≤ v | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | CXTPC.240.200 ≤ v | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | CXTZJ.240.200 ≤ v | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | MSNGM.240.200 ≤ v | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | MSNGW.240.200 ≤ v | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | MSNSN.240.200 ≤ v | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | MSTGM.240.200 ≤ v | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | MSTGW.240.200 ≤ v | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | MSTSN.240.200 ≤ v | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | MXNGM.240.200 ≤ v | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | MXTCT.240.200 ≤ v | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | MXTGM.240.200 ≤ v | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | MXTGW.240.200 ≤ v | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | MXTLS.240.200 ≤ v | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | MXTPM.240.200 ≤ v | CVEProject cvelistV5 (CNA) |
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | MXTSN.240.200 ≤ v | CVEProject cvelistV5 (CNA) |
References and advisories
1
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2025-02-13
- Last updated
- 2025-02-13
- State
- Published
- Assigner (CNA)
- Lexmark
Exploit prediction (EPSS)
0.45%
Probability of exploitation in 30 days
39.7%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- Yes
- Exploitation
- None
- Technical impact
- Partial
Weaknesses (CWE)
- CWE-843Access of Resource Using Incompatible Type ('Type Confusion')